Privacy policy

Last updated: October 18, 2026. Applies to the ConPact Chrome extension (version 1.0.0) and this website.

What ConPact does

ConPact reads a Terms of Service or privacy policy you ask it to scan and shows a plain-English summary with risk flags. It runs only on pages you choose to scan, or pages it detects as legal documents.

What is sent, and when

• The legal text you scan. When you use ConPact Cloud (the default), the text of the policy being scanned is sent to ConPact's server (hosted on Supabase) and from there to OpenAI to generate the summary. Only the legal document text is sent: no page title, no URL, no cookies, no other page content.
• A random install ID. ConPact generates a random ID on your device so it can count your 10 monthly free credits. It is not linked to your name, email, account or browsing history.
• Your own API key (optional). If you add an OpenAI or Anthropic key in settings, the text goes straight from your browser to that provider and not through ConPact's server. The key is stored in your browser's settings (which Chrome may sync across your signed-in devices) and never sent to ConPact.

What ConPact stores

• On the server: a shared cache of summaries, keyed by a fingerprint (hash) of the document text so the same document is not summarized twice, and a counter of credits used per random install ID. The cache holds the generated summary, not your browsing activity.
• On your device: your settings, the install ID, your last credit balance, and a local copy of recent summaries (up to 7 days) so repeat scans are instant.

What ConPact does not do

• No accounts, emails, payment details or advertising.
• No tracking, analytics or selling of data. No data is shared with advertisers.
• No reading of pages you have not asked it to scan. The extension needs access to all sites so it can detect legal pages, but it only analyzes text when you scan or when a page is recognized as a Terms or Privacy document.

Third parties

OpenAI processes the legal text to produce summaries, under its own privacy policy. Supabase hosts the server and database. Summaries are generated by AI and can contain mistakes. They are not legal advice.

Your choices

You can switch to your own API key or the keyword-only mode in settings, clear your data by removing the extension, and ask us to delete cached items by contacting us below.

Contact

Questions or deletion requests: realcarguyrighthere@gmail.com.